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CLAIMS 

What is claimed is: 

1 1 . An apparatus comprising: 

2 a tamper resistant digital content recovery module to recover protected digital 

3 contents of various types in an obfuscated manner; 

^ 4 a plurality of plain text digital content rendering modules communicately 

^ 5 coupled with each other in a hierarchical manner forming a hierarchy of modules, 

=S 6 with selective combinations of which to be selectively employed to render the 

f. 7 recovered digital contents of conresponding types, including one of the plain text 

8 digital content rendering modules occupying a root position of the hierarchy to 

O 9 exclusively receive the recovered digital contents to be rendered, of all types, from 

lU 

H 10 the tamper resistant digital content recovery module; 

id 

on one or more storage units to store said tamper resistant module and said 

12 plurality of plain text digital content rendering modules; and 

13 a processor coupled with the one or more storage units to execute the tamper 

14 resistant module and the plurality of plain text digital content rendering modules. 

1 2. The apparatus of claim 1 , wherein the tamper resistant module is equipped to 

2 verify to its satisfaction that the plain text digital content rendering module occupying 

3 the root position of the hierarchy has not been compromised, and to provide 

4 recovered digital content to the plain text digital content rendering module occupying 

5 the root position of the hierarchy, only upon having so verified to its satisfaction that 

6 the plain text digital content rendering module occupying the root position of the 

7 hierarchy has not been compromised. 
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1 3. The apparatus of claim 2, wherein the tamper resistant module is equipped to 

2 verify the plain text digital content rendering module occupying the root position of 

3 the hierarchy, responsive to a request from the plain text digital content rendering 

4 module occupying the root position of the hierarchy to recover a protected digital 

5 content. 

1 4. The apparatus of claim 3, wherein the tamper resistant module is equipped to 

S 2 verify the plain text digital content rendering module occupying the root position of 

R 3 the hierarchy by verifying a signature of the plain text digital content rendering 

^0 4 module occupying the root position. 

? 1 5. The apparatus of claim 1 , wherein each of at least a subset of the plain text 

S 2 digital content rendering modules is equipped to verify to its satisfaction that the 

J 3 immediate downstream plain text digital content rendering module or modules, if 

^ 4 any, have not been compromised. 

1 6. The apparatus of claim 5, wherein each of the subset of the plain text digital 

2 content rendering modules is equipped to verify to its satisfaction that the immediate 

3 downstream plain text digital content rendering module or modules have not been 

4 compromised, at least during initialization. 

1 7. The apparatus of claim 6, wherein each of the subset of the plain text digital 

2 content rendering modules is equipped to further verify to its satisfaction that an 

3 immediate downstream plain text digital content rendering module or modules 
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4 remain un-compromised before each transfer of recovered digital content to tfie 

5 immediate downstream plain text digital content rendering module. 

1 8. The apparatus of claim 5, wherein each of the subset of the plain text digital 

2 content rendering modules is equipped to verify to its satisfaction that the immediate 

3 downstream plain text digital content rendering module or modules have not been 

4 compromised by verifying conresponding signature or signatures of the immediate 

5 downstream plain text digital content rendering module or modules. 

5 1 9. The apparatus of claim 1 , wherein the digital content of various types 

2 2 comprises streaming media contents of a plurality of media, and of a plurality of 

li 3 format types. 

Ipsa'- 

1 10. The apparatus of claim 1 , wherein the apparatus is a selected one of a 

W 2 wireless mobile phone, a palm sized personal digital assistant, a notebook 

nJ 3 computer, a set-top box, a desktop computer, a single processor server, a multi- 

4 processor server, and a cluster of coupled systems. 

1 11. The apparatus of claim 1 , wherein a first subset of the plain text digital 

2 content rendering modules are member modules of a first application domain, and a 

3 second subset of the plain text digital content rendering modules are member 

4 modules of a second application domain. 

1 12. A processor implemented method, comprising: 

2 a root one of a plurality of hierarchically organized plain text digital content 

3 rendering modules collectively equipped to render digital contents of a plurality of 
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4 types requesting a tamper resistant digital cx)ntent recovery module to recover a first 

5 protected digital content of a first type; 

6 the tamper resistant digital content recovery module verifying that said root 

7 one of the plurality of hierarchically organized plain text digital content rendering 

8 modules has not been comprised; 

9 the tamper resistant digital content recovery module recovering the first 

10 protected digital content in an obfuscated manner, and transfening the recovered 

1 1 first digital content to said root one of the plurality of hierarchically organized plain 
Q 12 text digital content rendering modules; and 

y 1 3 said root one in conjunction with first at least one other one of said plurality of 

14 hierarchically organized digital content rendering modules rendering said first digital 

y 15 content, with each of said root and non-leaf ones, if any, of said first other ones of 

f;^ 16 said plurality of hierarchically organized digital content rendering modules verifying 

Wit an immediate downstream module is uncompromised before transferring the first 

W 1 8 digital content to the immediate downstream module to further the rendering of the 

py 19 first digital content. 

1 13. The method of claim 12, wherein the tamper resistant module verifies the root 

2 one of the plurality of hierarchically organized plain text digital content rendering 

3 modules by verifying its signature. 

1 14. The method of claim 12, wherein each of said root and non-leaf ones, if any, 

2 of said first other ones of said plurality of hierarchically organized digital content 

3 rendering modules verifies an immediate downstream module is uncompromised by 

4 verifying the immediate downstream module's signature. 
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1 1 5. The method of claim 1 2, wherein the method further comprises each of said 

2 root and non-leaf ones, if any, of said first other ones of said plurality of 

3 hierarchically organized digital content rendering modules verifies its immediate 

4 downstream module or modules, if any, during initialization. 

1 16. The method of claim 12, wherein the method further comprises 

2 the root one of the plurality of hierarchically organized plain text digital 

3 content rendering modules requesting the tamper resistant digital content recovery 
O 4 module to recover a second protected digital content of the same first type; 

%4 5 the tamper resistant digital content recovery module verifying that said root 

2 6 one of the plurality of hierarchically organized plain text digital content rendering 

u 7 modules has not been comprised; 

Q 8 the tamper resistant digital content recovery module recovering the second 

5? 9 protected digital content in an obfuscated manner, and transferring the recovered 

S 10 second digital content to said root one of the plurality of hierarchically organized 

11 plain text digital content rendering modules; and 

12 said root one in conjunction with the same first at least one other one of said 

13 plurality of hierarchically organized digital content rendering modules rendering said 

14 second digital content, with each of said root and same non-leaf ones, if any, of said 

15 first at least one other one of said plurality of hierarchically organized digital content 

16 rendering modules verifying an immediate downstream module is uncompromised 

1 7 before transfening the second digital content to the immediate downstream module 

18 to further the rendering of the second digital content. 
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1 1 7. The method of claim 1 2, wherein the method further comprises 

2 the root one of the plurality of hierarchically organized plain text digital 

3 content rendering modules requesting the tamper resistant digital content recovery 

4 module to recover a second protected digital content of a second type; 

5 the tamper resistant digital content recovery module verifying that said root 

6 one of the plurality of hierarchically organized plain text digital content rendering 

7 modules has not been comprised; 

% 8 the tamper resistant digital content recovery module recovering the second 

H 9 protected digital content in an obfuscated manner, and transferring the recovered 

? 10 second digital content to said root one of the plurality of hierarchically organized 

2 1 1 plain text digital content rendering modules; and 

= 12 said root one in conjunction with second at least one other one of said 

W 13 plurality of hierarchically organized digital content rendering modules rendering said 

W 14 second digital content, with each of said root and non-leaf ones, if any, of said 

S 15 second at least one other one of said plurality of hierarchically organized digital 

16 content rendering modules verifying an immediate downstream module Is 

17 uncompromised before transferring the second digital content to the immediate 

18 downstream module to further the rendering of the second digital content. 

1 1 8. An apparatus comprising: 

2 a plurality of digital content rendering modules communicately coupled with 

3 each other In a hierarchical manner forming a hierarchy of modules, with selective 

4 combinations of which to be selectively employed to protectively render digital 

5 contents of conresponding types, including one of said digital content rendering 

6 modules occupying a root position of the hierarchy to exclusively receive the digital 
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7 contents to be rendered, of all types, from at least a separate recovery module 

8 responsible for recovering the digital contents from their ciphered states, and each 

9 of the non-leaf ones of the digital content rendering modules being responsible for 

10 verifying to its own satisfaction that its immediate downstream module or modules, if 

1 1 any, have not been compromised; 

12 one or more storage units to store said plurality of digital content rendering 

13 modules; and 

14 a processor coupled with the one or more storage units to execute the digital 

15 content rendering modules. 

1 19. The apparatus of claim 1 8, wherein each of the non-leaf ones of the digital 

2 content rendering modules is equipped to verify to its satisfaction that the immediate 

3 downstream module or modules, if any, have not been compromised, at least during 

4 initialization. 

1 20. The apparatus of claim 1 8, wherein each of the non-leaf ones of the digital 

2 content rendering modules is equipped to further verify to its satisfaction that an 

3 immediate downstream digital content rendering module remains uncompromised 

4 before each transfer of digital contents to the immediate downstream digital content 

5 rendering module. 

1 21 . The apparatus of claim 20, wherein each of the non-leaf ones of the digital 

2 content rendering modules is equipped to verify to its satisfaction that the immediate 

3 downstream digital content rendering module or modules, if any, have not been 

4 compromised, by verifying corresponding signature or signatures of the immediate 

5 downstream digital content rendering module or modules. 
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1 22. The apparatus of claim 1 8, wherein the digital content of various types 

2 comprises streaming media contents of a plurality of media types, and of a plurality 

3 of format types. 

I 23. The apparatus of claim 1 8, wherein the apparatus is a selected one of a 
: 2 wireless mobile phone, a palm sized personal digital assistant, a notebook 

3 computer, a set-top box, a desktop computer, a single processor server, a multi- 

N= 4 processor server, and a cluster of coupled systems. 

yi 1 24. The apparatus of claim 1 8, wherein a first subset of the non-leaf modules are 

H 2 member modules of a first application domain, and a second subset of the non-leaf 

1 3 modules modules are member modules of a second application domain. 

C 1 25. A processor implemented method comprising 

5 2 each of a plurality of hierarchically organized digital content rendering 

3 modules verifying to its satisfaction that each of its immediate downstream module, 

4 if any, is uncompromized, during an initialization period; 

5 a root one of the plurality of hierarchically organized digital content rendering 

6 modules exclusively receiving a first digital content of a firet type; and 

7 said root one in conjunction with first at least one other one of said plurality of 

8 hierarchically organized digital content rendering modules rendering said first digital 

9 content, with each of said root and non-leaf ones, if any, of said first other ones of 
10 said plurality of hierarchically organized digital content rendering modules further 

I I verifying an immediate downstream module is uncompromised before transferring 
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1 2 the first digital content to the immediate downstream module to further the rendering 

13 of the first digital content. 

1 26. The method of claim 25, wherein each of said root and non-leaf ones, if any, 

2 of said first other ones of said plurality of hierarchically organized digital content 

3 rendering modules verifies an immediate downstream module is uncompromised by 

4 verifying the immediate downstream module's signature. 

H 1 27. The method of claim 25, wherein the method further comprises 

O 2 the root one of the plurality of hierarchically organized plain text digital 

iri 3 content rendering modules receiving a second protected digital content of the same 

Si 4 first type; and 

l" 5 said root one in conjunction with the same first at least one other one of said 

fri 6 plurality of hierarchically organized digital content rendering modules rendering said 

7 second digital content, with each of said root and same non-leaf ones, if any, of the 

S 8 first at least one other one of said plurality of hierarchically organized digital content 

9 rendering modules verifying an immediate downstream module is uncompromised 

10 before transferring the second digital content to the immediate downstream module 

11 to further the rendering of the second digital content. 

1 28. The method of claim 25, wherein the method further comprises 

2 the root one of the plurality of hierarchically organized plain text digital 

3 content rendering modules receiving a second protected digital content of a second 

4 type; and 

5 said root one in conjunction with second at least one other one of said 

6 plurality of hierarchically organized digital content rendering modules rendering said 
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7 second digital content, with each of said root and non-leaf ones, if any, of the 

8 second at least one other one of said plurality of hierarchically organized digital 

9 content rendering modules verifying an immediate downstream module is 

1 0 uncompromised before transferring the second digital content to the immediate 

1 1 downstream module to further the rendering of the second digital content. 

1 29. An article of manufacture comprising: 

2 a recordable medium; 

^3 a first plurality of programming instructions recorded on said recordable 

R 4 medium, with said first programming instructions designed to program a computing 

W 5 device, to implement on the computing device, a tamper resistant digital content 

y 6 recovery module to recover protected digital contents of various types in an 

7 obfuscated manner; and 
S 8 a second plurality of programming instructions recorded on said recordable 

y 9 medium, with said second programming instructions designed to program a 
5 10 computing device, to implement on the computing device, a plurality of plain text 

1 1 digital content rendering modules communicately coupled with each other in a 

12 hierarchical manner forming a hierarchy of modules, with selective combinations of 

13 which to be selectively employed to render the recovered digital contents of 

14 corresponding types, including one of the plain text digital content rendering 

15 modules occupying a root position of the hierarchy to exclusively receive the 

16 recovered digital contents to be rendered, of all types, from a tamper resistant digital 

17 content recovery module. 

1 30. The article of claim 29, wherein the tamper resistant module is equipped to 

2 verify to its satisfaction that the plain text digital content rendering module occupying 
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3 the root position of the hierarchy has not been compromised, and to provide 

4 recovered digital content to the plain text digital content rendering module occupying 

5 the root position of the hierarchy, only upon having so verified to its satisfaction that 

6 the plain text digital content rendering module occupying the root position of the 

7 hierarchy has not been compromised. 

1 31 . The article of claim 29, wherein each of at least a subset of the plain text 

2 digital content rendering modules is equipped to verify to its satisfaction that the 
H 3 immediate downstream plain text digital content rendering module or modules, if 
□ 4 any, have not been compromised. 

?1 1 32. The article of claim 29, wherein the digital content of various types comprises 

^ 2 streaming media contents of a plurality of media, and of a plurality of forniat types. 

\ y 

1 33. The article of claim 29, wherein the recordable medium is a selected one of a 

p 2 magnetically recordable medium and an optically recordable medium. 
1 
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